Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/a0tvKTcmgI33hNJ3SywEHvD7Wpw.roa
File: a0tvKTcmgI33hNJ3SywEHvD7Wpw.roa (raw, json)
Hash identifier: 0AUTUz24/rf3+Nq7km74XR3/M9MZJ13GnOOw3nN13MI=
Subject key identifier: 6B:4B:6F:29:37:26:80:8D:F7:84:D2:77:4B:2C:04:1E:F0:FB:5A:9C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186929C50024D0FC4B5A0516080FD6E6114
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/a0tvKTcmgI33hNJ3SywEHvD7Wpw.roa
Signing time: Mon 27 Feb 2023 11:22:42 +0000
ROA not before: Mon 27 Feb 2023 11:22:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
194.87.171.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
212.192.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Feb 2023 13:22:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:9c:50:02:4d:0f:c4:b5:a0:51:60:80:fd:6e:61:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 27 11:22:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b4b6f293726808df784d2774b2c041ef0fb5a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:da:7f:d1:6d:21:72:4a:d9:07:4a:da:e5:
3f:cd:13:ed:c7:6d:ac:0a:08:21:bf:29:53:fb:79:
4a:60:c3:4f:13:cf:67:e1:c2:75:9f:52:d8:30:39:
1b:95:2a:1f:16:e1:be:3c:e5:69:d5:33:0e:a8:bc:
bf:34:ba:04:63:a1:c3:02:20:10:52:2d:47:34:9a:
3f:cb:af:25:64:80:ac:5e:02:0a:95:a4:41:26:df:
ad:0b:3e:e4:53:b5:e6:38:f4:39:a2:ac:85:01:e0:
e5:8b:f9:fe:da:99:4d:d9:62:77:91:bd:b3:0b:d2:
83:de:7a:b8:96:7f:36:e2:78:2e:30:60:01:9b:39:
ab:89:cc:e7:6f:71:f7:99:24:09:0f:0d:23:b4:ed:
ef:27:74:02:0f:e0:3d:7b:2c:35:1b:22:c3:8b:d9:
5e:ad:3c:c1:1f:69:72:fd:56:92:ce:90:45:b5:0c:
40:9f:b2:1f:37:b0:84:ee:8b:e5:31:65:16:2c:eb:
07:1a:cf:9f:34:4f:75:62:a5:b8:0f:4d:c6:a2:ba:
bb:40:d2:ed:d4:73:29:30:d1:00:b4:8c:aa:60:6f:
20:89:2b:56:c4:ae:45:81:3e:72:26:a0:e1:ae:9b:
fa:05:3b:7f:f2:56:5d:1e:54:cb:72:99:0f:16:ab:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4B:6F:29:37:26:80:8D:F7:84:D2:77:4B:2C:04:1E:F0:FB:5A:9C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/a0tvKTcmgI33hNJ3SywEHvD7Wpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.172.0/24
192.124.182.0/23
193.124.8.0/24
193.124.133.0/24
193.124.203.0/24
194.58.42.0/24
194.58.45.0-194.58.47.255
194.87.22.0/24
194.87.27.0/24
194.87.82.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.123.0/24
194.87.126.0/24
194.87.136.0/24
194.87.138.0/23
194.87.165.0/24
194.87.171.0/24
194.87.198.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.55.0/24
195.133.94.0/24
195.133.193.0/24
195.133.195.0/24
212.192.0.0/23
212.192.208.0/23
212.192.211.0/24
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:e3:47:5b:ab:39:42:5c:47:5d:60:fa:74:1a:95:f5:a6:36:
ca:c2:e1:3a:5e:07:e8:b6:b2:f3:c0:df:33:34:4d:04:97:96:
db:e7:83:95:f8:df:31:2f:27:06:63:c0:de:f8:c4:ba:8d:22:
b1:ea:93:e7:c5:e1:63:b5:44:a5:c6:1e:c7:d7:f4:98:35:f8:
21:02:67:ee:41:9e:1e:fb:11:ce:99:2f:77:12:3b:b9:a9:a7:
5b:a8:50:87:0f:ee:7d:17:fc:9d:3d:07:7d:85:7a:98:79:c5:
52:6e:28:72:f1:7d:79:69:91:d9:f5:63:76:7e:91:07:2a:98:
9d:57:d8:9b:55:59:9c:eb:41:32:7a:0a:7c:96:33:c8:4e:20:
5e:db:76:25:40:0a:b4:f1:7e:63:a2:b6:2e:71:f8:79:68:60:
80:1f:d0:5b:e3:fb:14:34:22:ba:69:83:f7:c6:b8:2e:26:a5:
d5:1a:03:59:5a:47:c7:c8:12:42:7f:f8:cb:9d:93:f3:33:8c:
d3:37:e2:ed:01:0b:b8:a6:ba:cf:2a:df:93:1b:c0:93:1c:c3:
82:a7:13:b4:24:b8:7b:1b:35:07:77:2b:97:14:37:51:6f:ac:
a5:30:17:20:1a:08:6d:61:cc:a5:86:bb:44:a4:93:6e:e5:45:
20:33:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:20 2024 by rpki-client on console-fra.rpki-client.org